csvutils

func CheckForConfidentialObjAccessAtClusterScope ¶

func CheckForConfidentialObjAccessAtClusterScope(csvPermissions *types.CSVPermissions) bool

Checks if secrets and configmaps without explicitly defined resource names are accessed at the cluster scope.

func GetApisOwned ¶

func GetApisOwned(csv operator.ClusterServiceVersion) ([]string, error)

func GetPermissions ¶

func GetPermissions(csv operator.ClusterServiceVersion) (*types.CSVPermissions, error)

func WildCardApiGroupPresent ¶

func WildCardApiGroupPresent(csvPermissions *types.CSVPermissions) bool

Checks if any rules have "*" defined in its apiGroup definition.

func WildCardResourcePresent ¶

func WildCardResourcePresent(csvPermissions *types.CSVPermissions, ownedApis []string) bool

Checks if any rules have "*" defined under resources.(For non-operator owned apis.)